Six core commitments winrupe makes to every Pakistani player regarding their personal information — before you read the full legal text.
winrupe does not sell, rent, or trade your personal information to third-party marketers, data brokers, or any other commercial entities. Your CNIC details, mobile number, and financial information stay within the winrupe platform and its essential service partners only.
All data transmitted between your device and winrupe's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Pakistan's leading commercial banks. Data stored on winrupe servers is encrypted at rest using industry-standard protocols.
winrupe collects only the personal data genuinely necessary to operate the platform, verify your identity, process PKR transactions, and comply with regulatory obligations. We do not collect data speculatively or for undefined future purposes.
Registered winrupe players have the right to access, correct, and request deletion of their personal data at any time. Simply contact our support team and we will process your request within the timeframes set out in this Privacy Policy.
winrupe only sends promotional communications — including PSL betting offers, bonus alerts, and platform news — to players who have opted in. You may withdraw your marketing consent at any time through your account settings or by contacting our support team directly.
KYC documents — including CNIC copies and payment verification records — are handled strictly for identity verification, age confirmation, and AML compliance. They are stored securely and are not shared with unauthorised parties under any circumstances.
This Privacy Policy is issued by winrupe ("winrupe", "we", "us", or "our") and applies to all personal data collected, processed, stored, and shared in connection with the operation of the winrupe online casino and sports betting platform, accessible at winrupe.app.
This policy applies to all registered players, prospective players who visit winrupe.app without registering, and individuals who contact our support team. It covers personal data collected through the winrupe website, any associated mobile platform, live chat interactions, email correspondence, and all payment processing integrations including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
By registering an account on winrupe or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with the winrupe Terms & Conditions, which govern your overall use of the platform.
Scope Note: This policy covers all Pakistani player data. Where winrupe operates under international gaming licensing standards, additional data processing obligations may apply and are reflected in this document.
winrupe collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main data types we process:
| Data Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC scan/photo | Yes — for KYC |
| Contact Data | Pakistani mobile number, email address | Yes — for registration |
| Financial Data | JazzCash / EasyPaisa account number, bank account details (HBL, UBL, Meezan Bank), PKR transaction history | Yes — for deposits & withdrawals |
| Account Data | Username, account ID, login history, password hash, account settings | Yes — for account access |
| Gaming Data | Bet history, wagering amounts, game session logs, cricket and sports betting records, PSL market activity, win/loss records | Yes — for regulatory compliance |
| Technical Data | IP address, device type, browser type and version, operating system, device fingerprint, time zone | Automatic — collected on use |
| Behavioural Data | Pages visited, features used, session duration, click patterns, referral source | Automatic — via cookies |
| Communications Data | Live chat transcripts, support email content, feedback submissions | When you contact us |
winrupe does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance, such as CNIC information which by its nature may indicate national identity.
The majority of personal data winrupe holds is provided directly by you during the following interactions:
When you access winrupe.app, our systems automatically collect certain technical and behavioural data through cookies, web beacons, server logs, and device fingerprinting technologies. This data is collected to ensure platform security, prevent fraud, optimise performance, and support responsible gaming monitoring. Please refer to Section 8 (Cookies & Tracking) for full details.
In limited circumstances, winrupe may receive personal data about you from third parties, including:
winrupe uses your personal data for the following purposes:
winrupe will not use your personal data for any purpose materially different from those listed above without first notifying you and, where required by applicable law, obtaining your consent.
winrupe processes your personal data on one or more of the following legal bases:
As part of winrupe's licensing obligations and commitment to player safety, all players must complete a Know Your Customer (KYC) process before their first withdrawal is processed. The KYC process requires submission of the following documents:
KYC documents are transmitted over encrypted connections, stored in a secure environment with restricted access, and retained for the period specified in Section 10 (Data Retention) of this policy. winrupe's KYC team processes documents manually and does not use fully automated KYC decision-making that could produce legal effects without human review.
Important: winrupe will never ask you to share your KYC documents via live chat, SMS, or social media. All KYC document submissions must be made through the secure upload facility within your winrupe account.
Cookies are small text files placed on your device when you visit winrupe.app. They allow the platform to recognise your device, remember your preferences, maintain your login session, and collect analytical data about how the platform is used.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use core winrupe features including account login and payment processing. Analytical cookies may be disabled without affecting platform functionality.
winrupe implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
Despite these measures, no online system is entirely immune to security risks. In the event of a data breach that is likely to result in a high risk to your rights and interests, winrupe will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.
winrupe retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and for so long as required by our regulatory and legal obligations. The following retention periods apply as a general guide:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Regulatory and AML compliance |
| KYC documents (CNIC scans) | Duration of account + 5 years after closure | Licensing obligation |
| Financial transaction records | 7 years from transaction date | AML / financial regulation |
| Gaming history (bet records) | 5 years from date of activity | Licensing and dispute resolution |
| Support communications | 3 years from last interaction | Complaint handling and quality review |
| Marketing preferences | Until opt-out or account closure | Consent management |
| Technical / log data | 12 months | Security and fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with winrupe's data destruction procedures. Anonymised data may be retained indefinitely for statistical and analytical purposes.
As a winrupe player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected].
Request a copy of all personal data winrupe holds about you. We will respond within 30 days of receiving your verified request.
Request correction of any inaccurate or incomplete personal data held about you. Identity changes require supporting documentation.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Request that winrupe restricts the processing of your data in certain circumstances, such as while the accuracy of the data is being verified.
Request a structured, machine-readable copy of personal data you have provided to winrupe, to transfer to another service provider.
Object to processing based on legitimate interests, including direct marketing. On receipt of a valid objection to marketing, winrupe will cease processing immediately.
winrupe will respond to all data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, and you will be notified of the extension and the reason for it.
Age Restriction: 21+ winrupe is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21.
winrupe uses CNIC-based age verification during KYC to confirm that all players meet the minimum age requirement of 21 years. If winrupe discovers that personal data has been collected from an individual under 21, the account will be suspended immediately, the data will be deleted as soon as legally permissible, and any funds held in the account will be handled in accordance with regulatory requirements.
If you are the parent or guardian of a minor who you believe has registered on winrupe without authorisation, please contact our support team at [email protected] immediately so that we can take appropriate action.
winrupe sends marketing communications — including bonus offer alerts, PSL betting promotions, seasonal casino offers, and platform feature announcements — only to players who have expressly opted in to receive such communications during registration or through their account settings.
You may withdraw your marketing consent and opt out of all promotional communications at any time by:
Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, KYC status updates, or security alerts, which are sent as part of your account service regardless of marketing preferences.
winrupe does not share your contact details with third-party marketers. You will only ever receive marketing communications from winrupe itself, sent from an official winrupe.app email address.
winrupe reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, we will notify registered players by email or via a prominent in-platform notice at least 14 days before the changes take effect.
The "last updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically. Continued use of winrupe after notification of a revised policy constitutes your acceptance of the updated terms.
For changes that require fresh consent — for example, new processing purposes that go beyond what was originally disclosed — winrupe will seek your explicit consent before commencing such processing.
For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data winrupe holds about you, please contact our Data Protection team through the following channels:
Please mark formal data subject requests clearly as "Data Subject Request" in your correspondence to ensure prompt routing to the appropriate team. winrupe will acknowledge receipt of your request within 3 business days and provide a substantive response within 30 calendar days, as required.
This Privacy Policy was last updated on 1 January 2026. The most current version is always available at winrupe.app/privacy-policy.
winrupe is built on trust. With bank-grade encryption, strict KYC standards, and a zero data-sale policy, you can focus on what matters — cricket betting, PSL markets, slots, and live casino action, all in PKR.
21+ Gambling is for adults only. Please play responsibly.